Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SzlUfExKENZx4KMM9q1loMpY05Y.roa
File: SzlUfExKENZx4KMM9q1loMpY05Y.roa (raw, json)
Hash identifier: u5q/9hpPhabP2uJ0HmSH6QJ9Oy+8VkQ/F1NZU0x+i2c=
Subject key identifier: 4B:39:54:7C:4C:4A:10:D6:71:E0:A3:0C:F6:AD:65:A0:CA:58:D3:96
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CA746B87F17F220E74B41CE72CD80CDA1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SzlUfExKENZx4KMM9q1loMpY05Y.roa
Signing time: Tue 26 Dec 2023 17:57:58 +0000
ROA not before: Tue 26 Dec 2023 17:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200237
IP address blocks: 2a06:de01:f0::/48 maxlen: 48
2a06:de01:f1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a7:46:b8:7f:17:f2:20:e7:4b:41:ce:72:cd:80:cd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 26 17:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b39547c4c4a10d671e0a30cf6ad65a0ca58d396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:84:bd:44:d5:2b:d4:43:0d:af:e2:ba:7f:
09:1d:df:60:d3:23:3b:2c:f2:11:93:d3:cc:9a:af:
54:b5:61:6c:13:e5:53:04:3c:42:4c:d2:18:65:ca:
0f:48:6b:02:f9:6e:93:46:dc:9d:b8:ae:35:93:45:
63:fb:39:74:bb:8f:73:27:f8:53:81:7a:6f:94:23:
5b:90:69:bf:c9:92:93:3f:ea:ed:5d:c5:03:c8:47:
a7:db:07:67:12:58:e1:5e:06:2f:3a:48:5b:32:2b:
0c:3b:44:33:fd:22:f8:d0:af:35:58:af:72:22:48:
03:32:f3:7b:3a:9d:5f:97:17:8e:d9:eb:56:22:9f:
8c:3d:6f:37:ca:42:e6:7d:45:62:ee:80:b9:0a:70:
f6:90:53:f0:82:c3:82:e2:07:bb:76:93:ac:40:21:
a5:49:52:71:4f:1d:30:31:ef:76:96:94:8e:72:b4:
04:2a:dd:07:bb:db:24:f9:1f:63:24:14:d4:b1:de:
83:63:4c:e1:d8:a4:d0:ff:0e:2e:00:55:4a:d3:9e:
14:5b:1c:ed:4d:4e:c8:61:a3:db:10:82:c1:be:54:
3b:ba:12:a8:1c:be:38:56:a5:5a:a4:a8:c7:13:63:
ab:d2:f7:9b:cf:39:f7:66:56:58:39:ce:e3:eb:46:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:39:54:7C:4C:4A:10:D6:71:E0:A3:0C:F6:AD:65:A0:CA:58:D3:96
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SzlUfExKENZx4KMM9q1loMpY05Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:f0::/47
Signature Algorithm: sha256WithRSAEncryption
31:f8:41:43:8e:6c:44:01:3f:0f:7a:5c:8c:a1:90:a7:19:42:
d5:eb:41:28:39:71:5c:74:15:f5:ab:1a:71:f1:82:cf:df:c0:
9a:37:bc:c1:55:93:d3:13:2a:e6:36:e5:19:cc:74:44:24:6f:
f2:a5:a9:c7:2b:c9:67:d6:1e:97:5b:77:a1:4e:7d:dd:af:a7:
94:39:d4:46:68:41:a7:eb:b4:e1:e2:8f:5f:48:06:bd:ad:ca:
a1:af:2e:0b:91:c9:a0:19:2e:a5:e9:46:20:c1:37:5c:e4:38:
6f:e9:9f:00:2d:ed:9a:0f:13:1e:12:80:cf:20:fe:84:49:74:
3b:27:fa:2a:68:e6:61:74:a5:4a:7f:65:00:4e:79:b1:be:ae:
2d:9d:8e:cb:30:b0:68:d8:60:0e:63:25:82:e9:cd:ee:5c:ef:
d4:72:27:80:e1:9f:12:68:fe:3d:2c:4f:a7:da:b6:1c:d4:ca:
fc:f7:83:29:08:cc:fb:3d:a8:10:c8:8a:77:e7:cd:90:22:1f:
8a:81:71:25:25:3f:16:fe:d4:aa:0a:fd:79:59:63:f3:77:39:
50:c9:1b:2e:3b:98:7a:9e:03:be:52:d0:18:f8:f0:83:1c:3a:
e2:1e:dc:52:1b:c7:44:49:fd:4c:61:ff:da:0f:f9:66:1c:6a:
0f:9b:ad:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:31 2024 by rpki-client on console-fra.rpki-client.org